Skill

• Analyzed: May 12, 2026, 4:30 AM
• Findings: 1
• Version: 1.0.0
• Hash: 5e69bad4f15db2cfb11c15e1f87f63ab683d225d085b283f417a6fffbf2be1f8
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. It correctly implements security best practices such as using `jq` for safe JSON escaping of user input, enforcing HTTPS and TLS 1.2 for API calls, and using environment variables for the API key. The `SKILL.md` file is transparent about security considerations and provides good advice to the user. There is no evidence of malicious intent, data exfiltration, unauthorized execution, or prompt injection attempts against the agent. The API endpoint `open.bigmodel.cn` is legitimate for Zhipu AI.